Privacy policy
Effective Date: 31 January 2026
Novus DNA Ltd (“we”, “us”, or “our”) is committed to protecting your privacy and ensuring your personal data is handled safely and lawfully. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller:
Novus DNA Ltd
Registered in England and Wales
Registered Office: 18 The Ropewalk, Nottingham, England, NG1 5DT
Contact:
For any data protection or privacy-related queries, please contact us at hello@novusdna.co.uk.
1. INFORMATION WE COLLECT
We may collect and process the following types of personal information:
- Personal identification information such as name, email address, telephone number, and delivery address
- Payment and transaction information relating to purchases (processed securely by third-party payment providers)
- Technical data including IP address, browser type, device information, and website usage data
- Communication data including messages or enquiries sent to us
We collect personal data directly from you when you place an order, contact us, or interact with our website.
2. LEGAL BASES FOR PROCESSING
We process personal data under one or more of the following lawful bases:
- Consent – where you have given permission (for example, marketing communications)
- Contract – where processing is necessary to fulfil an order
- Legal obligation – where processing is required by law
- Legitimate interests – where processing is necessary for business operations and does not override your rights or freedoms
3. HOW WE USE YOUR INFORMATION
We use your personal data to:
- Process and deliver orders
- Communicate with you regarding purchases or enquiries
- Improve our website and services
- Comply with legal and regulatory obligations
- Send marketing communications where you have provided consent
You can withdraw marketing consent at any time using the unsubscribe link in emails or by contacting us.
4. HOW WE SHARE YOUR INFORMATION
We do not sell or rent your personal data.
We may share limited information with trusted third parties such as payment processors, delivery partners, website hosting providers, and analytics services. We may also disclose personal data where required by law.
All third parties are required to protect your data and use it only for the purposes agreed with us.
5. INTERNATIONAL DATA TRANSFERS
Some service providers may process or store personal data outside the UK. Where this occurs, appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the ICO.
6. DATA SECURITY AND STORAGE
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or misuse.
7. DATA RETENTION
We retain personal data only for as long as necessary for the purposes outlined in this policy or as required by law. Typical retention periods include:
- Order and transaction data: up to 6 years
- Marketing communications: until consent is withdrawn
- Website analytics data: up to 24 months
Data is securely deleted or anonymised when no longer required.
8. YOUR RIGHTS
Under UK GDPR, you have rights including:
- Access to your personal data
- Correction of inaccurate data
- Deletion of data
- Restriction of processing
- Data portability
- Withdrawal of consent at any time
Requests can be made using the contact details above.
9. AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
10. COOKIES
Our website uses cookies and similar technologies to ensure proper functionality, analyse site usage, and improve user experience. Where required, cookies are used only with your consent.
Further information is available in our Cookie Policy.
11. YOUR RIGHT TO COMPLAIN
If you have concerns about how we handle your personal data, please contact us so we can address the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113
12. UPDATES TO THIS POLICY
We may update this Privacy Policy from time to time. The latest version will always be available on our website.